This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/ywsBEYyAKFfKP2eykdIBS6MH4y8.roa File: ywsBEYyAKFfKP2eykdIBS6MH4y8.roa (raw, json) Hash identifier: HDEyzi3R+BlLQKOv6yiUGnBCJrIeFX9J0ujKiMj5JFo= Subject key identifier: CB:0B:01:11:8C:80:28:57:CA:3F:67:B2:91:D2:01:4B:A3:07:E3:2F Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Certificate serial: 019B79ECC101F11E8D960A1F6DAAF0E315E3 Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/ywsBEYyAKFfKP2eykdIBS6MH4y8.roa Signing time: Thu 01 Jan 2026 14:18:37 +0000 ROA not before: Thu 01 Jan 2026 14:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199363 IP address blocks: 94.240.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:c1:01:f1:1e:8d:96:0a:1f:6d:aa:f0:e3:15:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Validity Not Before: Jan 1 14:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb0b01118c802857ca3f67b291d2014ba307e32f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9d:a4:11:28:bc:91:c6:48:bd:17:52:b0:4d: 17:b9:23:86:68:70:3d:b2:30:ff:c1:a5:b9:22:26: cf:7e:3f:f7:5d:b2:25:f4:a5:cd:3b:b6:ff:aa:91: d3:ee:fc:a3:53:c0:e4:16:89:c0:83:b6:9d:ff:a5: be:4d:48:a1:8f:27:f1:f2:bc:91:c7:55:03:96:81: 8b:37:9b:e1:36:74:2a:a4:f0:5f:55:02:92:97:60: 81:28:e2:06:bb:d6:e9:56:1a:55:dd:fa:ae:38:fd: 9a:c8:ef:c6:0b:67:55:e0:f3:ad:25:51:b6:3b:ae: dd:8e:e7:74:e4:15:73:07:a9:14:62:0b:51:d9:37: 56:67:c6:02:c7:07:a0:03:b6:53:a0:23:50:bd:37: 30:4c:c6:70:13:8b:52:d1:59:82:a8:38:53:18:56: 17:fd:c3:9d:7e:43:80:20:c7:b7:02:53:bb:1d:f0: 29:71:c8:ee:c4:2d:33:05:84:27:b4:69:e4:c7:ee: 81:69:c0:c1:d1:56:2d:e0:37:34:d6:ac:63:d7:39: 89:29:aa:b6:29:0e:45:ad:e0:96:4b:92:68:04:32: 3c:c4:7e:a8:04:8b:6b:08:f7:a2:e7:a5:a5:ff:c3: 2c:a0:72:bf:7e:9a:21:7a:dc:fc:d2:87:ac:46:b5: 78:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:0B:01:11:8C:80:28:57:CA:3F:67:B2:91:D2:01:4B:A3:07:E3:2F X509v3 Authority Key Identifier: keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/ywsBEYyAKFfKP2eykdIBS6MH4y8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.240.38.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:ae:fe:69:d5:eb:10:83:7f:83:7a:23:67:f9:d2:71:ea:84: 6b:19:bf:12:e6:7c:db:c9:f1:b4:39:e2:22:f1:7b:69:df:56: 81:40:0a:c3:d7:14:e5:2f:b8:f6:e3:f1:ca:13:94:09:e7:9f: 3a:dd:59:63:e9:d8:b9:13:82:47:ea:cb:01:e8:5f:4d:3e:f6: 43:df:4d:93:55:7b:ef:fb:cc:b6:a2:d3:d8:43:70:2e:7d:d4: 76:3a:e0:17:23:95:6c:e2:36:f0:48:ea:16:0e:6b:5b:d1:4a: 09:08:27:b9:71:b4:84:e6:5e:76:6d:c6:ac:ce:cb:68:db:82: e0:c0:56:60:9e:2c:04:9d:f8:0f:6d:99:55:69:0a:8d:c9:53: ee:53:27:0b:d6:09:3d:1e:ad:c8:17:38:90:89:15:6d:77:f2: c6:46:2f:a4:f2:7b:60:3f:a5:77:88:7a:02:e7:07:3f:bd:2b: 4c:f0:5f:b7:ef:fe:86:84:dc:ae:28:42:a6:b7:46:63:93:47: 62:e3:6a:05:dc:1d:c1:0f:48:02:51:d0:9f:53:c7:7d:d8:c4: 9a:b9:df:d6:ce:c7:a7:fe:91:b5:ab:64:3d:a2:e4:c6:9e:27: e7:57:f2:e7:cb:21:e4:53:6f:69:24:0b:48:fa:c7:a1:c7:da: c5:b7:14:97 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57MEB8R6Nlgofbarw4xXjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl NTQ2YTQwHhcNMjYwMTAxMTQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjBiMDExMThjODAyODU3Y2EzZjY3YjI5MWQyMDE0YmEzMDdlMzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZ2kESi8kcZIvRdSsE0XuSOGaHA9 sjD/waW5IibPfj/3XbIl9KXNO7b/qpHT7vyjU8DkFonAg7ad/6W+TUihjyfx8ryR x1UDloGLN5vhNnQqpPBfVQKSl2CBKOIGu9bpVhpV3fquOP2ayO/GC2dV4POtJVG2 O67djud05BVzB6kUYgtR2TdWZ8YCxwegA7ZToCNQvTcwTMZwE4tS0VmCqDhTGFYX /cOdfkOAIMe3AlO7HfApccjuxC0zBYQntGnkx+6BacDB0VYt4Dc01qxj1zmJKaq2 KQ5FreCWS5JoBDI8xH6oBItrCPei56Wl/8MsoHK/fpohetz80oesRrV4TQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMsLARGMgChXyj9nspHSAUujB+MvMB8GA1UdIwQY MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt MjMwNDllNGQyZjEyLzEveXdzQkVZeUFLRmZLUDJleWtkSUJTNk1INHk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXvAmMA0G CSqGSIb3DQEBCwUAA4IBAQBMrv5p1esQg3+DeiNn+dJx6oRrGb8S5nzbyfG0OeIi 8Xtp31aBQArD1xTlL7j24/HKE5QJ55863Vlj6di5E4JH6ssB6F9NPvZD302TVXvv +8y2otPYQ3AufdR2OuAXI5Vs4jbwSOoWDmtb0UoJCCe5cbSE5l52bcaszsto24Lg wFZgniwEnfgPbZlVaQqNyVPuUycL1gk9Hq3IFziQiRVtd/LGRi+k8ntgP6V3iHoC 5wc/vStM8F+37/6GhNyuKEKmt0Zjk0di42oF3B3BD0gCUdCfU8d92MSaud/Wzsen /pG1q2Q9ouTGnifnV/LnyyHkU29pJAtI+sehx9rFtxSX -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:49 2026 by rpki-client